Product by Ubuntu
Libxml2
12 known vulnerabilities in Libxml2 (Ubuntu), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-74860 | Libxml2: double-free/uaf in libxml2 python bindings | 8.5 | |
| Critical | CVE-2026-6653 | libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling | 9.8 | |
| High | CVE-2026-6732 | Libxml2: libxml2: denial of service via crafted xsd-validated document | 7.5 | |
| Not rated | CVE-2004-0989 | XMLSoft libxml2: Buffer Overflow | — | |
| High | CVE-2026-86140 | XMLSoft libxml2: Stack-based Buffer Overflow | 8.0 | |
| High | CVE-2026-86143 | XMLSoft libxml2: Integer Coercion Error | 6.9 | |
| High | CVE-2026-86142 | XMLSoft libxml2: Heap-based Buffer Overflow | 6.9 | |
| High | CVE-2026-86138 | XMLSoft libxml2: Integer Overflow or Wraparound | 6.9 | |
| High | CVE-2026-86139 | XMLSoft libxml2: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2026-76781 | Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute | 5.5 | |
| High | CVE-2026-86144 | XMLSoft libxml2: Incorrect Resource Transfer Between Spheres | 5.6 | |
| Medium | CVE-2026-1757 | Libxml2: memory leak leading to local denial of service in xmllint interactive shell | 6.2 |